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1. (currently amended) A method of doing business comprising the steps of: 

distorting in a processor a digital representation of one or more undistorted biometrics of a 

user to create a distorted biometric using one or more transformations , at l e oct on p of tho 

transformations comprising one or mor e non - inv e rtibl e function s; and 

comparing determining , in response to a transaction, whether the distorted biometric matches 

with one or more stored distorted biometrics, the determining act being undertaken without knowing 

the undistorted biometric so that the distorted biometric represents a user without revealing the digital 

representation of the one or more undistorted biometrics. 

2. (Original) A method, as in claim l t where the biometric is a physical characteristic. 

3. (Original) A method, as in claim 1, where the biometric is a behavioral characteristic. 

4. (Original) A method, as in claim 1, where the biometric includes anyone or more of the following: one 
or more fingerprints, one or more minutiae, a voice pattern, a facial image, an iris, a hand signature, a 
auditory signature, a gesture, and a gait. 

5. (Original) A method, as in claim 1, where the transaction is for one or more of the following: use of a 
financial instrument, providing a service, executing a contract, a sale, a bid, a submitted account number, 
an authorization, an identification, a reservation request, a purchase, a quote, an access to a physical 
structure, an access to a financial account, an authority to manipulate a financial account, an access to a 
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database, an access to information, a request for a privilege, a request for a network service, an offer for a 
network service, an auction, and an enrollment. 

6. (Original) A method, as in claim 1, where the distorted biometric is used to authenticate the user. 

7. (Original) A method, as in claim 1, where the user is anyone or more of the following: a customer, a 
customer submitting an order on a network, a client, an employee, a user of a service, and a purchaser of 
a product. 

8. (Original) A method, as in claim i, being performed by any one or more of the following: the user, a 
company, a service company, a company selling products, a bank, a computer, and a credit card company. 

9. (previously presented) A method of doing business comprising the steps of: receiving one or more distorted 
biometrics associated with a user identifier, wherein said one or more distorted biometrics were created using 
one or more transformations of a digital representation of one or more biometrics of a user, at least one of 
the transformations comprising one or more non-invertible functions; 

Storing a plurality of records in one or more databases, each record having one or more distorted 
biometrics and a user identifier; and 

receiving one or more requests from a requester, the one or more requests containing one or more 
target distorted biometrics associated with a target identifier; 

comparing in a processor the one or more requests with one or more of the records; and 
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providing the requester with an indication that the target distorted biometric and the target identifier 
matched one or more of the respective one or more distorted biometrics and associated user identifiers. 



10. (Original) A method, as in claim 9, further comprising the step of storing a distortion transform used to 
create the distorted biometric from the digital representation of (he one or more biometrics of the user. 



1 1 . (Original) A method, as in claim 9, where the distorted biometric can not be inverted to a digital 
representation of the biometric from which the distorted biometric was created. 



12. (Original) A method, as in claim 9, where the distorted biometric is canceled by allowing a user to 
replace the distorted biometric with a second distorted biometric. 



13. (Original) A method, as in claim 12, where the second distorted biometric is created by a second 
distortion transform that is different than a first distortion transform used to create the distorted biometric. 



14. (Original) A method, as in claim 9, where the requester is anyone or more of the following; a financial 
company, a bank, a brokerage* a credit card company, and a merchant. 



15. (previously presented) A method of granting authorization of a transaction, the method comprising the 
steps of: 
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receiving a user identifier, a distorted biometric and a transaction request, wherein said distorted 
biometric was created using one or more transformations of a digital representation of one or more biometrics 
of a user, at least one of the transformations comprising one or more non»invertible functions; 

checking the user identifier with information about one or more accounts of the user; 

verifying the identity of the user by comparing in a processor the received user identifier with a stored 
user identifier and comparing the received distorted biometric with a stored distorted biometric associated with 
the stored user identifier; and 

granting authorization for the transaction request if the information about the account is in good 
standing and the distorted biometric is associated with the user, wherein said distorted biometric was created 
using the one or more transformations. 

16. (Original) A method, as in claim 15, where the identity of the user is verified by receiving an 
acknowledgment from a remote computer that the user identifier is associated with the digital representation 
of the distorted biometric. 

17. (previously presented) A method of doing business comprising the steps of: 

sending a user identifier and an associated digital representation of a user biometric to a remote 
computer that distorts the digital representation of the user biometric to a distorted biometric using one or 
more transformations, at least one of the transformations comprising one or more non-invertible functions; 

sending the user identifier and a transaction request to a financial company; 
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determining in a processor that the user identifier is associated with the distorted biometric and 
Sending an acknowledgment to the financial company; and 

receiving an authorization for the transaction request from the financial company if the 
acknowledgment is sent and the user identifier is associated with a account in good standing. 

18, (Currently Amended) A method of doing business comprising the steps of: 

sending a transaction request, a user identifier, and a distorted biometric determined in a 
processor using one or more transformations that transform a digital representation of one or more 
undistorted biometrics of a user to the distorted biometric i, at l e ast on e of tho tranflformntion s 
comprioing at looot ono non inv e rtibl e Amotion; and 

providing a tester with a comparison distorted biometric but not providing the tester with the 
undistorted biometrics: and 

instructing the tester to compare the comparison distorted biometric with the distorted 
biometric to determine whether to authorize r e c e iv i ng - on authorization for a transaction defined by 
the transaction request. 
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